fan-out — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fan-out (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Bounded subagent delegation and evidence-first synthesis for Claude Code. You stay the planner and the single decision-maker; subagents do scoped work and hand back evidence you merge.
Spawn only if at least one is true:
Otherwise keep it local. Do not rationalize a spawn for work that is sequential, tiny, or shares write surface — coordination overhead and edit collisions cost more than they save.
| Situation | Use |
|---|---|
| One bounded subtask, keep main context clean | a single Task call |
| 2-5 independent subtasks, need all results together | batch `Task` calls in one message (they run concurrently) |
| Dependent / multi-stage / DAG-shaped batch | the dynamic Workflow tool (pipeline/parallel/agent stages) |
| Genuinely long-running, parent must stay responsive | background Bash task (run_in_background) + TaskGet/TaskStop |
Default to batched Task calls. Reach for Workflow only when stages depend on each other or you need loop/fan-out control flow; reach for background tasks only for true async.
TASK: <one concrete outcome>
SCOPE: <paths / area to look at; what is out of bounds>
MODE: read-only | edit ONLY <named files>
CONTEXT: <self-contained — subagents inherit NO parent transcript>
RETURN: <exact shape: status, evidence (file:line), commands run, findings + confidence, risks>Subagents start fresh with no conversation history — never reference "the above" or prior turns.
.claude/agents/<role>.md when one matches; else general-purpose.and inventories. Pin model: in the agent file, or omit to inherit the session model.
Edit/Write in their tool scope) unless they own adisjoint, named write surface.
Task batches block until every subagent returns — read all results before thenext substantive step; never act on a partial mental model.
TaskGet; TaskStop anything stale or superseded.not revert or restage another worker's changes." The parent serializes commits.
If a subagent underfits, tighten its scope and return contract and re-run only that one on a stronger (Opus) role. Never blanket-escalate the whole batch.
Merge and dedupe returns; lead with the highest-signal evidence. When subagents disagree, record it and resolve in the parent:
CONFLICT: <claim>
- agent A: <evidence>
- agent B: <evidence>
RESOLUTION: <which wins + why, or the remaining uncertainty>Any proposed edit ships with tests/checks actually run, or a concrete command-level verification plan the parent (or a final verify subagent) executes.
| Symptom | Fix |
|---|---|
| Subagent overscoped / wandered | tighter SCOPE + RETURN contract |
| Weak / unusable output | specify exact return shape + evidence format |
| Parent acted on partial results | wait for all returns before deciding |
| Forgot a background task | reconcile every task via TaskGet |
| Edit collision | disjoint write surfaces; parent serializes commits |
| Role underfit | re-run only that agent on Opus |
| Too many agents | collapse to 2-5 with broader scopes |
See references/agent-templates.md for copyable role stubs and a Workflow skeleton.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.